Paper Abstract and Keywords |
Presentation |
2015-03-04 13:40
The Geographical Origin Estimation of Malware Using Language Information Masaru Kawakita, Shigeyoshi Shima (NEC) ICSS2014-88 |
Abstract |
(in Japanese) |
(See Japanese page) |
(in English) |
Cyber attack using malware has become a social problem, it had an impact on the decision in the nation. In the conventional methods that evaluates for a file whether is malware or not, anyone did not know which nation or organization had attacked. Regardless of use or non-use of the network infrastructures and creation toolkits, the malwares often include some attacker’s claims with geographical information. In this paper, for the purpose of estimating malware’s geographical origin, I propose the estimation method of country of origin using Kernel-Based SVM of which the feature vectors are the locale ID of the resource, the Unicode Block in strings, the countries by the embedded IP address assignment, and the timestamp and time zone information that include in the malware. In the experiment of a classification problem, we show that our method has 95.8% of accuracy rate. |
Keyword |
(in Japanese) |
(See Japanese page) |
(in English) |
Cyber Security / Malware Analysis / Locale / SVM (Support Vector Machine) / Classification / / / |
Reference Info. |
IEICE Tech. Rep., vol. 114, no. 489, ICSS2014-88, pp. 151-156, March 2015. |
Paper # |
ICSS2014-88 |
Date of Issue |
2015-02-24 (ICSS) |
ISSN |
Print edition: ISSN 0913-5685 Online edition: ISSN 2432-6380 |
Copyright and reproduction |
All rights are reserved and no part of this publication may be reproduced or transmitted in any form or by any means, electronic or mechanical, including photocopy, recording, or any information storage and retrieval system, without permission in writing from the publisher. Notwithstanding, instructors are permitted to photocopy isolated articles for noncommercial classroom use without fee. (License No.: 10GA0019/12GB0052/13GB0056/17GB0034/18GB0034) |
Download PDF |
ICSS2014-88 |
Conference Information |
Committee |
ICSS |
Conference Date |
2015-03-03 - 2015-03-04 |
Place (in Japanese) |
(See Japanese page) |
Place (in English) |
Meio Univiersity |
Topics (in Japanese) |
(See Japanese page) |
Topics (in English) |
Communication Security, etc. |
Paper Information |
Registration To |
ICSS |
Conference Code |
2015-03-ICSS |
Language |
Japanese |
Title (in Japanese) |
(See Japanese page) |
Sub Title (in Japanese) |
(See Japanese page) |
Title (in English) |
The Geographical Origin Estimation of Malware Using Language Information |
Sub Title (in English) |
|
Keyword(1) |
Cyber Security |
Keyword(2) |
Malware Analysis |
Keyword(3) |
Locale |
Keyword(4) |
SVM (Support Vector Machine) |
Keyword(5) |
Classification |
Keyword(6) |
|
Keyword(7) |
|
Keyword(8) |
|
1st Author's Name |
Masaru Kawakita |
1st Author's Affiliation |
NEC Corporation (NEC) |
2nd Author's Name |
Shigeyoshi Shima |
2nd Author's Affiliation |
NEC Corporation (NEC) |
3rd Author's Name |
|
3rd Author's Affiliation |
() |
4th Author's Name |
|
4th Author's Affiliation |
() |
5th Author's Name |
|
5th Author's Affiliation |
() |
6th Author's Name |
|
6th Author's Affiliation |
() |
7th Author's Name |
|
7th Author's Affiliation |
() |
8th Author's Name |
|
8th Author's Affiliation |
() |
9th Author's Name |
|
9th Author's Affiliation |
() |
10th Author's Name |
|
10th Author's Affiliation |
() |
11th Author's Name |
|
11th Author's Affiliation |
() |
12th Author's Name |
|
12th Author's Affiliation |
() |
13th Author's Name |
|
13th Author's Affiliation |
() |
14th Author's Name |
|
14th Author's Affiliation |
() |
15th Author's Name |
|
15th Author's Affiliation |
() |
16th Author's Name |
|
16th Author's Affiliation |
() |
17th Author's Name |
|
17th Author's Affiliation |
() |
18th Author's Name |
|
18th Author's Affiliation |
() |
19th Author's Name |
|
19th Author's Affiliation |
() |
20th Author's Name |
|
20th Author's Affiliation |
() |
Speaker |
Author-1 |
Date Time |
2015-03-04 13:40:00 |
Presentation Time |
25 minutes |
Registration for |
ICSS |
Paper # |
ICSS2014-88 |
Volume (vol) |
vol.114 |
Number (no) |
no.489 |
Page |
pp.151-156 |
#Pages |
6 |
Date of Issue |
2015-02-24 (ICSS) |
|